what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Spider

Symantec AMS Intel Alert Handler Command Execution

Posted Jul 28, 2010

Authored by Spider

Symantec Antivirus Corporate Edition AMS Intel Alert Handler service (hndlrsvc.exe) proof of concept command execution exploit.

tags | exploit, proof of concept

SHA-256 | bf02e9e1d36238740750081701ce2a3c2b498e0a3532ceabfb5c7b2b1318b948

Download | Favorite | View

Foofus.net Security Advisory 20100726 - Symantec Antivirus CE Command Execution

Posted Jul 26, 2010

Authored by Spider | Site foofus.net

The Symantec Antivirus Corporate Edition AMS Intel Alert Handler service (hndlrsvc.exe) provides alert setup and response capabilities to AMS2. A design error in Symantec's implementation of this function allows an attacker who can establish a TCP connection to port 38292, on a vulnerable host to execute commands at system level on that host. Versions 10.1.8.8000 and below are affected.

tags | advisory, tcp

SHA-256 | fbd8d8c9489c9d5364d8d254c147e664b61c9384cceec62815a48e5a516b2f90

Download | Favorite | View